- Bird-users - Mailing Lists

Re: [Euro-ix-rs-vwg] New release 1.2.0
by Ondrej Zajicek 21 Jan '10

21 Jan '10

On Thu, Jan 21, 2010 at 06:41:15PM +0300, Mikhail A. Grishin wrote: > Hi, > > Another one question regarding looking glass output. > Is it possible to show current prefix count in 'show protocols' output? > > Right now, if we want to collect prefix counters, we need to apply 'show > route protocol R1234x1 count' commands for every router which has > "Established" state in 'show protocols' output. > You can use 'show protocols all' command: ospf1 OSPF master up Jan07 Running Preference: 150 Input filter: ACCEPT Output filter: REJECT Routes: 1 imported, 0 exported, 0 preferred Route change stats: received rejected filtered ignored accepted Import updates: 4 0 0 3 1 Import withdraws: 0 0 --- 0 0 Export updates: 2 1 1 --- 0 Export withdraws: 0 --- --- --- 0 The line with 'Routes:' is probably what you want. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

Re: [Euro-ix-rs-vwg] New release 1.2.0
by Ondrej Zajicek 21 Jan '10

21 Jan '10

On Tue, Jan 19, 2010 at 12:54:43PM +0300, Mikhail A. Grishin wrote: > About full time and date info in "show" output -- yes, please send to us > the patch. And thank you very much for it! Here is one. > Do you have a plans to integrate that patch in main source code in the > future releases? We will probably implement soome configurable time format. > About running the BIRD as "non-root" uid: We'll wait for stable > solution. If it requires big changes in source codes (or not so big in > RS case), we think that quick patches can reduce the overall stability > of the product and should be well-tested. OK > P.S. MSK-RSM2, that running BIRD for IPv4, is stable and we didn't see > any major issues. That is nice. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

Setting up anycast DNS using bird
by K Storbeck 19 Jan '10

19 Jan '10

Fellow birdwatchers, We're running a set of resolvers here using an anycast setup. We currently do this on FreeBSD using openbsd's bgpd. Bgpd is started with a bare config defining the local as, the neighbor and its as. After starting up our DNS servers on a local dummy0 interface, and we're confident that they work, we're using bgpctl (openbgp's CLI) to announce one or more prefixes. So far I have a working setup, but I'm not completely satisfied: log syslog {info, warning, error, fatal, debug, trace, remote, auth}; log "/var/log/bird.log" all; router id 192.168.1.1; listen bgp address 192.168.1.1 port 179; protocol kernel { persist; # Don't remove routes on BIRD shutdown scan time 20; # Scan kernel routing table every 20 seconds } protocol device { scan time 10; # Scan interfaces every 10 seconds } # only guesswork here: I'm presuming this scans all dummy interfaces, and looks what is up and configured? protocol direct { interface "dummy*"; } protocol bgp { debug all; local as 65516; neighbor 192.168.1.2 as 3265; source address 192.168.1.1; # again: guesswork, does this announce all 'protocol direct' stuff? export all; } My preference would be to explicitly list the prefixes that I want to announce, not having to rely on what I'm really configuring on my linux dummy interface. Is that coming, or did I misinterpret the docs? I'd love to setup a v4 and a v6 bgp session with 1 daemon, since my DNS software is fine with it. Do I understand it correctly that this currently isn't possible? Regards, Kai

3 2

Re: [Euro-ix-rs-vwg] New release 1.2.0
by Ondrej Zajicek 15 Jan '10

15 Jan '10

On Fri, Jan 15, 2010 at 05:23:48PM +0300, Mikhail A. Grishin wrote: > Hi, Ondrej > > BIRD at production server is still stable and VERY fast (comparing with > Quagga). > > We have some questions about BIRD and may be some bugs. > Hope you could help us with these issues. > > 1. Is it possible to run daemon not as root, but as some unpriveleged > user (like quagga does)? This is very important for security reasons. > (binding to 179/tcp port with root priveleges, other tasks without root) It is not possible. I have this feature in TODO list, but it is pretty big change. OTOH, for just the route server case (just BGP without kernel routing table sync) that might be an easy. > 2. Is it possible to organise birdc interface to work in "read only" > mode, with limited set of commands, like "show ...", "help" and "exit"? > This is for duty staff, and for looking glass access. > (Also there are many security reasons in this question) > > 3. Is it possible to implement option in config file, that specify > permissions for sock file (bird.ctl) ? > This is for access to birdc console from non-root rights (until 2. is > unresolved). No, it is not implemented. A workaround might be to use chmod/chown on bird.ctl in start script, or define sudo commands for appropriate tasks. > 4. How you apply automatic cron reconfiguration of bird? > How could we say "reconfigure" from birdc interface inside some scripts? > Do you have working examples? We plan to do it from remote machine via ssh. echo configure | birdc > 5. Lack of text output filters. > If we need to view some very big output (10000+ routes from some peer), > we want to apply search filters to text output (like "| grep", "| grep > -v", "| begin" (this is from cisco) ) You can use integrated filters: show route where ... or redirect output echo show route | birdc | grep ... > 6. Lack of text output redirection to external file. > If we want to save large output into text file for further analysis, we > want to do something like: "show route all > file.txt" echo show route all | birdc > file.txt > 7. How could we turn off paging(more) inside birdc console ? It is turned off if output is redirected to file/pipe. > 8. (Bug?) On test Bird installation, with 3 peers only, at 11am > today(15Jan) I saw that session with some peer is up since "15:36" (and > no date). I understood, that is means 15:36 14Jan. > After 12:30, (90 minules later) the same session shows "Jan14" (there is > no more 15:36). Why so? Limit is 20 hours. Afer that, just a day is shown. Rather strange behavior, i acknowledge. > 9. (addition to 8.)In general, we want to see time and date output for > every session, every route. Is it possible? > This is VERY important for looking glass tasks. There is no config option for it, but it could be done by simple change in the source code. I could send you a patch, if you want. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

2 1

New release 1.1.7
by Ondrej Filip 21 Dec '09

21 Dec '09

Hi! New version is ready. Santiago made a great job. This version includes some minor enhancements. Version 1.1.7 (2009-12-20) o Implements BGP Route Refresh (RFC 2918). o Implements route reload command. o Deep changes and bugfixes in pipe protocol. o Bugfix in OSPF premature aging of LSA. o Bugfix in OSPF next hop calculation. o Bugfix in core related to route withdraws. o Several minor bugfixes. All distro packages will follow soon. Ondrej

4 3

bgp soft reconfiguration inbound
by Wolfgang Hennerbichler 16 Dec '09

16 Dec '09

Fellow Bird Users, I thought our bird installation was ready for prime-time as one thing caught my eye which I don't like at all, but hopefully you can help me out - we do bgp connections like this (only necessary stuff displayed): protocol bgp R1120x193_203_0_25 { local as myas; neighbor 193.203.0.25 as 1120; password "xyz"; import filter bgp_in_AS1120x193_203_0_25; export all; table T1120x193_203_0_25; rs client; start delay time 55; } filter bgp_in_AS1120x193_203_0_25 prefix set allnet; { # ... allnet = [ 193.171.255.32/27, 193.171.255.64/27, 192.92.125.0/24, 194.0.0.0/24 ]; if ! (net ~ allnet) then reject; accept; } Now I realized that if I changed the definition for 'allnet' and do a 'configure soft' these routes that are added or removed to 'allnet' are not rejected or added, because it seems that there is no bgp soft reconfiguration taking place (it works if I trigger a soft reconfiguration outbound on the peer router, or if I restart the protocol which causes bgp to flap). I know that nix.cz doesn't need this, as filtering is done in the pipe protocol, but we would really really like to filter at the very border, and if the filters change, I think a bgp soft reconfiguration inbound would be great. Is there a way to do a bgp soft reconfiguration, so that the routes are re-transmitted / re-calculated? Thanks for any help and have a nice weekend; Wolfgang -- www.vix.at | www.aco.net wh(a)univie.ac.at | WH844-RIPE Vienna University Computer Center

5 25

Memory Usage of BIRD
by Wolfgang Hennerbichler 05 Dec '09

05 Dec '09

Hi Folks, I just made a little experiment: * let BIRD peer with a router that has Full Feed * letting BIRD eat Full Feed (and tweet) - memory footprint ~ 130 MB BTW (64 Bit Linux) * shutting the session down on the router-side * BIRD's memory consumption decreased to 128 MB, but was never freed again. So now I don't know if this is 'by design' (routes are marked dirty and overwritten on next usage) or a bug... Thanks for any replies; Wolfgang -- www.vix.at | www.aco.net wh(a)univie.ac.at | WH844-RIPE Vienna University Computer Center

2 4

Howto enable Bird debug messages (DBG)
by Vonlanthen, Elmar 01 Dec '09

01 Dec '09

Hello all How can I enable the debug messages, printed with the macro DBG? I tried with: ./configure --enable-debug and adding: if test "$enable_debug" = yes ; then cat >>confdefs.h <<\_ACEOF #define DEBUGGING 1 + #define LOCAL_DEBUG 1 + #define GLOBAL_DEBUG 1 _ACEOF and starting with: bird -d ... or: bird -d -D /var/log/bird.debug But I never see the messages printed with "DBG". For example: sysdep/unix/main.c: DBG("Initializing.\n"); What do I do wrong? I use bird 1.1.6 on a Gentoo Linux system. Thanks for any help. Best regards Elmar

2 2

show inner statistics for bgp
by Martin Kraus 30 Nov '09

30 Nov '09

hello. is it possible to see the information about bgp sessions? accepted routes, sent routes etc? similar to what quagga does? thanks mk

4 6

unequal cost load balancing?
by KORN Andras 26 Nov '09

26 Nov '09

Hi, we have a 5Mbps symmetric microwave uplink with one static IP and a /30 subnet. We're contemplating getting an additional ADSL connection to serve as backup. If the ISP cooperates, is there a way for me to load-balance and fail over between these two connections using BIRD? If so, how? (The DSL connection would obviously be asymmetric; the downstream direction would probably be a lot faster than 5Mbps, whereas the upstream direction would probably be somewhat slower.) Thanks! Andras -- Andras Korn <korn at elan.rulez.org> - <http://chardonnay.math.bme.hu/~korn/> It's best to be at the centre of things - then you get in everybody's way.

3 6